01Who we are
We are DabarQ. We build instant quoting systems and automated workflows for home service businesses internationally.
For the information collected through this website and through our own business records, we are the data controller. For information you give us as a client so that we can build your system, we act as a data processor on your instructions.
You can reach us about anything in this policy at [email protected].
02The short version
We collect what you send us through the enquiry form and by email, and we use it to answer you and to do the work you asked for. Client data stays inside systems that are secured and access controlled. We do not sell anything, we do not run advertising, and we do not track you around the internet. Ask us to delete something and we will.
03What we collect
When you use the enquiry form
| Information | Why it is there |
|---|---|
| Your name | So we can address you properly |
| Your email address | So we can reply and send your confirmation |
| Your business name | Optional, and it helps us understand your trade and market |
| The systems you selected | So we can quote the right things |
| How you price a job today | So we can tell you what your system would actually cost to build |
| A submission timestamp and a spam check field | To keep automated spam out of our inbox. Both are discarded after the check. |
When you email us
We hold the content of our correspondence, your email address, and anything you attach or include, for as long as it is useful for our working relationship and our business records.
When you visit this website
The page itself does not set cookies, does not run analytics, and does not build a profile of you. The server hosting the site keeps standard access logs, which typically include an IP address, a browser identifier and the time of the request. These are used for security and to keep the site running.
The site loads typefaces from a third party font service. When your browser fetches those files, that service receives your IP address and basic request details. If you prefer to avoid this, browser extensions that block third party font requests will stop it, and the page will fall back to your system fonts.
What we do not collect
We do not ask for and do not want payment card numbers, government identification numbers, health information, or any other sensitive category of personal information. Please do not send them.
04Why we collect it
| Purpose | Lawful basis |
|---|---|
| Answering your enquiry and preparing a quote | Steps taken at your request before entering a contract |
| Delivering the work you engaged us for | Performance of a contract |
| Keeping records, invoices and correspondence | Legal obligation and legitimate interests |
| Keeping our systems secure and spam free | Legitimate interests |
| Occasional follow up about work we discussed | Legitimate interests, and you can opt out at any time |
We do not send marketing newsletters unless you have asked for them. If that ever changes, it will be opt in, and every message will carry a working unsubscribe link.
05Client data during a build
To build and test a system properly we usually need access to real business data, which can include your customer records, documents, message history, pricing and process detail.
When we handle that data, the following applies:
- We use it only to build, test and support the system we agreed on
- We act on your instructions and for no other purpose
- We use the smallest amount of real data that will do the job, and anonymised or sample data wherever that works
- We keep it inside systems that require authentication and restrict access
- We do not use your business data to train any general purpose model
- We do not share it with anyone outside the engagement
- We return or delete our working copies when you ask, and by default within 90 days of an engagement ending
You remain responsible for having the lawful right to share that data with us, and for telling your own customers how their information is used, in line with the privacy law that applies to you.
06Who else touches it
Running a business means using a small number of reputable service providers. We keep that list deliberately short. The categories are:
- Email and productivity. Handling correspondence and documents.
- Cloud hosting and databases. Storing enquiry records and the systems we build.
- Workflow and automation platforms. Running the systems that process submissions.
- AI providers. Where a system uses AI to read, classify or draft content.
- Accounting and payments. Invoicing and record keeping.
- Website hosting and font delivery. Serving this site.
Each provider is bound by its own contractual and security obligations, and each receives only what it needs to perform its function. We are happy to name the specific providers used in your engagement, and to sign a data processing agreement, on request by email.
We may also disclose information where the law requires it, where it is necessary to establish or defend a legal claim, or where it is needed to protect someone's safety.
If we ever transfer our business, client records may transfer with it. You would be told before that happened.
07Where your data is held
We work with clients internationally. Information is therefore processed across borders, including in data centres operated by service providers in various countries.
Where personal information leaves the United Kingdom or the European Economic Area, transfers rely on the safeguards available under applicable law, including standard contractual clauses in the agreements we hold with providers.
If your organisation requires data to stay within a specific region, tell us before the engagement begins and we will confirm in writing whether that is possible for your build.
08How long we keep it
| Type of record | Retention |
|---|---|
| Enquiries that go nowhere | 24 months, then deleted |
| Client correspondence | The length of the engagement plus 3 years |
| Working copies of client data | Deleted on request, and by default within 90 days of an engagement ending |
| Invoices and financial records | As long as tax and accounting law requires, generally up to 10 years |
| Server access logs | Short retention, as set by the hosting provider |
You can ask us to delete something sooner, and we will, unless we are required to keep it by law.
09How we protect it
- Accounts are protected with strong unique passwords and multi factor authentication
- Credentials and API keys are stored in dedicated credential managers, never in documents, pages or code
- Databases use row level security so that no record is readable without the right permission
- Public endpoints validate and reject anything that is not a legitimate submission
- Access is limited to what is needed, and removed when an engagement ends
- Devices are encrypted and kept up to date
No system can be guaranteed perfectly secure. What we can promise is that security is designed in from the start, and that we will tell you promptly and honestly if something goes wrong.
10Artificial intelligence
Some systems we build use AI to read, sort, draft or generate content. Where that happens:
- We use business grade services whose terms exclude customer content from being used to train their general models
- We send the minimum content needed for the task and avoid sending sensitive categories of information
- We build a human review step into any place where a wrong output would carry real cost
- We tell you which parts of your system involve AI, and what it does at each step
We do not use your business data, your documents or your customer records to train any model of our own.
11What we never do
- Sell, rent or trade personal information to anyone
- Run advertising or share your information with advertising networks
- Track you across other websites
- Add you to a mailing list because you sent an enquiry
- Use one client's data to benefit another client
- Share your business detail with your competitors
12Cookies and tracking
This website sets no cookies of its own, runs no analytics, and carries no advertising or social media tracking pixels. There is no consent banner because there is nothing to consent to.
The only third party request the page makes is to a font service, described in section 3.
13Your rights
Wherever you are, you can ask us to do any of the following, and we will respond within 30 days:
- Access. Tell you what information we hold about you.
- Correct. Fix anything that is wrong or out of date.
- Delete. Remove what we hold, unless the law requires us to keep it.
- Export. Give you a copy in a common machine readable format.
- Restrict. Limit how we use it while a question is being resolved.
- Object. Tell us to stop processing where we are relying on legitimate interests.
- Withdraw consent. Where we relied on consent, take it back at any time.
Email [email protected] with what you want and we will handle it. There is no charge, and we will only ask you to confirm your identity where it is genuinely necessary to protect the information.
You may also exercise these rights through an authorised representative, and in the case of a deceased or incapacitated person, through a lawful heir or assign.
14Australia
Where the Australian Privacy Act 1988 and the Australian Privacy Principles apply to information we hold, we handle it in line with those principles. You may complain to us first, and if you are not satisfied with our response, to the Office of the Australian Information Commissioner.
15UK and Europe
Where the UK GDPR or the EU GDPR applies, you hold the rights set out in section 13, and you may lodge a complaint with your local supervisory authority, or with the Information Commissioner's Office in the United Kingdom.
Cross border transfers rely on the safeguards described in section 7. We do not carry out automated decision making that produces legal or similarly significant effects about you.
16United States
Where state privacy laws apply, including in California, Colorado, Connecticut, Utah and Virginia, you may exercise the rights described in section 13. We do not sell personal information and we do not share it for cross context behavioural advertising, as those terms are used in those laws. We will not discriminate against you for exercising a right.
17Children
This is a business to business service and it is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, tell us and we will delete it.
18Data breaches
If a security incident occurs that is likely to affect your information, we will investigate immediately, contain it, tell you what happened in plain language, tell you what we are doing about it, and notify the relevant authority where the law requires it. For clients, we will do this without undue delay and in any case within 72 hours of becoming aware.
19Changes to this policy
We will update this policy as our practices develop. The date at the top always shows the current version. Where a change materially affects how we handle your information, we will tell active clients by email rather than relying on you to notice.
20Complaints
If something about how we have handled your information concerns you, email us first at [email protected]. We will acknowledge within 5 working days and give you a full response within 30 days.
If our response does not resolve it, you may complain to the privacy regulator in your own country, including the Office of the Australian Information Commissioner, the Information Commissioner's Office in the United Kingdom, or your local supervisory authority in the European Economic Area.
21Contact
DabarQ
Instant quoting systems for home service businesses
[email protected]
Everything happens by email, which keeps a written record for both of us and works across time zones. We aim to respond within one working day.
Back to top ↑